Searching PAJ 1/2 ^— v 

PATENT ABSTRACTS OF JAPAN 



(11 publication number : 07-036559 
(43)Date of publication of application : 07.02.1995 



(51)Int.CI. G06F 1/00 

606F 1/14 
G06F 15/00 



(21 Application number : 06-140369 


(71)Applicant 


: INTERNATL BUSINESS MACH 






CORP <IBM> 


(22)Date of filing : 22.06.1 994 


(72)Inventor : 


HARTMAN JR ROBERT C 


(30)Priority 






Priority number : 93 96132 Priority date 


: 22.07.1993 


Priority country : US 



(54) SECURE TIME KEEPING DEVICE AND SECURE TIME SERVER 
(57)Abstract: 
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a reliable time value by allowing a server to ciphering a 
present time value from a TOD clock through the use of 
a private key corresponding to a requesting client to 
send the present time value through an open 
communication line. 

CONSTITUTION: At the time of receiving a secure time 
request at a server I/O port 128, an electronic storage 
device 130 accesses the private and secret key for 
mutual reference based on an open clock. Reading a 
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through the use of the private key for mutual reference. 
A server system 120 prepares a responding transmission 
including ciphered time and date information, sends it 
back to the client system and writes it in a client TOD 
clock 108. The reliable time value of the client TOD 
clock is used for executing a time limit set to a media 
licence. 
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[0027] The client computer system 102 must periodically initiate 
a secure time transmission when it operates in a secure time 
request-receive network. Alternatively, when it operates in a 
secure time broadcast network, the server periodically initiates 

10 the transmission without requiring a request from the client. In 
the request-receive network, the client computer processor 202 sends 
a secure time request to the server 120 to initiate a secure time 
transmission . This request is generated by the CPU 104 and includes 
current values for various components of the secure timekeeping 

15 device 214. In other words, it includes values for the TOD clock 
108, the authenticated time indicator 2 18, the precis ion maintenance 
register 220 , the correction adj ustment register 222 , and the public 
key 112. According to the preferred embodiment, this information 
is collected simply by GET CURRENT TIME command and includes MAC 

20 in order to avoid the recording-playback problem. In any case, 
this information is encrypted by the encryption/decryption 
processor 106 using a private key of the client, which willbe included 
in the transmission along with a client's public key, and is 
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transferred to the server system through the I/O port 114 . As shown 
in Fig. 4 , the server system subsequently calculates a new precision 
maintenance value and a new correction adjustment value, generates 
a new client TOD clock value, encrypts the information using the 
5 private key corresponding to the client ' s public key (the same holds 
for the MAC according to the preferred embodiment) , and returns 
the encrypted information to the client computer system 102 . Upon 
receiving the information, the encryption/decryption processor 106 
uses the private key 110 to decrypt these new values, namely, the 

10 TOD clock value , the precision maintenance value and the correction 
adjustment value. According to the preferred embodiment, the MAC 
is also decrypted and used when the server response is checked against 
the client request. Subsequently, the CPU 104 stores the new TOD 
clock value in the TOD clock 108, the new precision maintenance 

15 value in the precision maintenance register , and the new correction 
adjustment value in the correction adjustment register 220 to 
configure various other components of the secure timekeeping device 
214. Finally, the authenticated time indicator 218 is set to TRUE 
to indicate that the encrypted time and date value have been 

20 successfully processed and that an authenticated reliable TOD clock 
value is currently in use. 

[0028] In the secure time broadcast network, the client operation 
is the same as that described above, except that there is no client 
request raised. Instead, the server periodically generates a 
25 secure time broadcast that is encrypted by a client's private key 
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and identified by matching it with a client's public key. 
Alternatively, the server sends a secure time broadcast 
simultaneously to all clients after sending an encrypted master 
key to the all clients, while this broadcast is decrypted at the 
5 clients using the time master key that has been delivered prior 
to the broadcast . The server does not have sufficient data necessary 
to produce a new precision maintenance value and a correction 
adjustment value because these broadcasts occur without request 
being made for them. In other words, information for them is not 
10 incorporated in the operation under this mode. Upon receiving the 
broadcast secure time transmission, a new TOD clock value is 
decrypted and provided to the TOD clock 108 as described above, 
while the authenticated time indicator 218 is set TRUE. 

[0029] In the preferred embodiment, if message verification is 
15 necessary, the client initiate a broadcast mode by first performing 
a transmission that includes a first MAC. When the server 
subsequently broadcasts a secure time transmission to the client, 
it includes the first MAC in the transmission. The client 
acknowledges that it has received the transmission by sending a 
20 new MAC that will be used when the server performs the next secure 
time transmission. This process is repeated in each subsequent 
broadcast. Also in this broadcast mode operation involving MAC, 
values for the client TOD clock, an authenticated time indicator, 
a precision maintenance register, and a correction adjustment 
25 register can be incorporated in the client acknowledgement. This 
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helps to alleviate the above mentioned disadvantage to some extent, 
and to enable the server to provide an updated precision maintenance 
value and correction adj ustment value in the next broadcast . These 
values are not accurate compared with those in the request-receive 
mode. This is due to a fact that the next broadcast takes place 
long after the acknowledgement that constitutes the basis for these 
values . However, this problem itself can be addressedby increasing 
the frequency of broadcasts within the bandwidth limits of the 
client. 

[0030] Fig. 3 represents an additional mechanism provided in the 
client computer system 102 to monitor the integrity of the power 
supply. A power integrity monitor 302 is added to the secure 
timekeeping device 214 in the package 216 that is physically secure . 
The power integrity monitor 302 is connected to other components 
for secure timekeeping including the CPU 104, the TOD clock 108, 
the authenticated time indicator 218, the precision maintenance 
register 220, and the correction adjustment register 222, via an 
electronic circuit for monitoring (indicated by the dashed line) . 
During its operation, the power integrity monitor 302 continually 
monitors the voltage level for the above mentioned components against 
predefined normal ranges representing operation limits of the 
electronic elements used in the client computer system. If a 
supplied regular voltage or a voltage for the backup purpose reduces 
to fall outside a range that is required for maintaining a stable 
and correct operation of the secure timekeeping device component, 



then the power integrity monitor 302 sets the value of the 
authenticated time indicator 218 to FALSE to indicate that the TOD 
clock 108 is no longer reliable. 

[0031] It should be noted that many variations are possible for 
5 the power integrity monitor 302 . For example, the power integrity 
monitor 302 can be configured so that it monitors the voltage of 
the TOD clock 108 only, or it only monitors any one of other components 
rather than monitoring all the components in the secure timekeeping 
device . In another example , the power line to the secure timekeeping 

10 device 214 can be designed so that a single power input path is 
provided. In this case , the power integrity monitor 302 can directly 
monitor the power input path instead of monitoring individual 
components. Specific electronic elements and low level elements 
selected for performing the power integrity monitoring function 

15 in 302 ultimately become a basis for the design selection. This 
issue is covered by many known literatures, and therefore not 
explained here. 
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v-;*t^ 1 0 2 (i, Afigim 2 0 6 LT^£r^I* 
!> > rt*P1B«Sia 2 12 2fc tWa$1B«3£« 2 0 8 \Z%f L 
tf- ^ORftB £»&^S:?Tl/\ S^pfffi 2 0 4 Jifrd 

8liCPU10 4^j;i?FALSE{c:t«7F$^ o ir 

^tWP,, BBE^iJ-fV'^— ^ 2 1 8^, »3®Wtd 
^^fllfife^tLfcW^F-^y^r— ^2 1 6F^|C0C PU 10 4 

liE^Sy-f >v^^— ^ 2 1 8Ht, ^>-t^ — ^ . v^^-A 
1 0 2F^T^^^nSV>-rtbC07 P n^^At^t9%ffi 

Sr i^KCfcfeld, PBJfiy^ b$^T a#j&s«F^t;S 

OV^T(OBWttBtfatO*BWWffl«!B9 2 8 8 5 0 -^td 
[00 2 1] nyt'a-^ • ^r^TOD^P 
l/^>T—5 218|iCPU104tdJ:l9 TRUEfdir 
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irit$rf5 D it^Mgj 2 0 4 {Ct^-T J; 5 5-, i^-r A • 
Zkt>XZZ> 0 

[0 0 2 2] «jH-C#S-fe^^r -^-MCjzDTQD 

2 0, HiEHa£U^^ 2 2 2»t^^B:y^3EjE*2 2 
4^? N CPU 1 0 4O$iJ^Tfcm^S::£icj; 9. 
TOD^p 1 0 8<Ogtt©«a^»»L, TOD^ 

&mm~t&Z.kX~&Z> 0 StEWSE^.** 2 2 2fi, *y 

s^3EiE»2 2 4d«t Dffiv^&ttt. JE*fl*BB©|Wlc-e 

«*W«E-rS 0 »i8ffii"Ctt, 51EB8^^^ 2 2 2 

ttL"0*5, wCQflfifi^n s/^3EiE»2 2 4^*x.C> 

^ o y^JEjES2 2 411, *a<7?JEEH»A»e>OT 
OD^o^ oit4>(Z>»dSHSMH^* u < & £ * -c-t 

tf. ^ o ^ ^IEg 2 2 4 1 O^fc'lt TOD ^ p 

1 0 8£:Ii^-f 6o ^OWSEOffittli, KjEHSeu- 
^** 2 2 20«ttKJ;!>ftS$;ft,5 0 Jzo-C, t)LC 

So 

[0023] nm.nm^i?*# 2201^ ^^t- 19 

RBM~£ C £: tc J; 9 , TOD^D7^108 ©IPSM^F 
^^Oiti LX^^L^tbSo 0*9. (^jE2!2 2 
4MJ;9«E$*l5) TOD^n-7^10 8lClt-5^ 

£>5o »ag«-Cttfflft«pJRUv?^^ 2 2 OttBf+XtMS 
S'JoflSSrftttUXV^o CPU 1 0 4co»Jfti^J:«7, r 
<0<fffijeffltoKTOD^ a ^10 SOSiEfi^JtttS 

3EjEHSE«f, TOD^n^i08 CDR* t) XliU 

(CpJii L/c <t £ , CPU104 teWBE8##H > v^— ^ 
^FAL S EtCir y 1 0 8<Dti$M 



(8) ffl¥7-3 6 5 5 9 

[0 0 2 4] #S0iJt£:&l*"Cf;i:. i?*^T • ?4J±3— 

t>^!2 i 4(oa>«ro#*K*^r^-fe^LJ; 3 t 
ffii"Sfc46id«astbfcA^34SK(te)tirv^5 0 set cu 

RRENT TIME-fft^te, ^^7> HOD^Dy^l 0 

2 2 (DTt wp-i-ib s ntcmxm^it sntv^i^n 

Kttkft-0*£ Q SET CURRENT TIMElfo'frfc:o^Ttt\ Or 

FALSElciryh^ti^o if— '«<Z)^3&sWB«K:.fc 9 

■tfttSSEI^MSr-fr y htSiitttSS^ SET CURREN 
T TIME^SrflfWUTWIE^SK^^— ^ICTRUE 

[0 0 2 5] i?3r^T • ^^A^r-tV^gi2 14^ 
20 <hi&&Wimi~Z> fctf>lC % GET CURRENT TIMElfrfraSR** & 

2 18, Ifffi^fcWv 5 ^^ 2 2 0, ^t^MlEfl^U^^ 
^ 2 2 20fflS:RBi5^i:d5-c#5 o 
[0 0 2 6] SET CURRENT TIME#^^U^GET CURRENT Tl 

jo 2 1 4 co i o<o*^^^ ^ir y h vxttrnm-r % c <t ^ 

SET CURRENT TINIER «fc <9 HtT$n<5«ffif±, i5MF15-C«» 

^Ki2 i 4rt-cn»ftjnSo tit?*), i/ozk- 

PU104I1, ?7-<T> h • V7 h^7^rtCf|^|^n 
S^t*<-tOfl#S!l*aS:»»SL, ^tTOD^Py 
^108, iI^Ii/^^ 2 2 0, 2fcU«3EE«!lEW^ 
^^2 2 2(C^-TSo 
40 [0 0 2 7] ^7^T> h • ^yt'a-^ • i/^zr 2± 1 

Ao^p-K^h (IWI^ilff) • -*3> h!7->7{c:io 
^"Ci/jf^-TS^H. -7-— ^ds^ > hOB*S:^ 

17— ^jcfcv^-ctt. ^ 7^7y h • =i yfj.- ^ - :/p 
ir^i^2 0 2tt-y— ^1 2 0^ir=¥n.T - 
^Sri:icJ:i9^^^T • ^>fA6MIW5o coo 
50 ^liCPUl 0 4KJ;!9£/SS;h,. ir^f^T • 
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tfo TOD^ p ^/^ 1 0 8, BIE^iK^v? 

-fir — ^ 2 18, ttft«rjRUS*;**' 2 2 0. XjEWKUS? 

2 2 2, 1 2 »jS09"C 

«\ £<Dfflf«f±GET CURRENT TIME^Srffl V^rfHifflJC* 

MACfc^lC) riz>W«*Ht-SHbU -tL-CBf^fc;* 
tifctf^^^^^rv h • =iyt'a^ - ^*"rJ* i o 

tl06H 1 0«rffll^Twtbfe(OSfLV^TO 

So #KB*!|-e«:, MACfc£fc«PR£*v 

CPU104tt, frU^TOD^o^^f^TOD 
^ o y ^ l 0 8 tc, SfU^WSftjKfflSrfflfSJ^ittw^^ 
*LT«fUu^3EEW»«[S:XjEW»u^^2 2 

12 1 4<Oftboa/r<o«dE»*SrK3gi-S 0 Hp 
#tt S ftfcB#MRT/ 0 f+Offias«S VKJ&S £ BSE S 

^ i: WH^'K^^—^ 2 1 8^TRUE 

[0 0 2 8] i?=*^-T • ACO^a— K^r-y^ h • ^ 

TOD^ay^fiA5»B!$ttTTOD^By^ 108 — 
BfiE»S#H >"V^— * 2 1 8^TRUEiCir 

[0 0 2 9] SaWte^TH:, > ^ir-v^eoaB^^ 
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^7^7>h^»MAC^e^H 

ac^5 0 ^7^7yhii s ^fco-fe^oLT 
• # «( J*f&vk&ff 5 £#fc/Hv^5&a<DSffLi*MAC* 

:/n — K*-** h • Ktefc It 3 ±IEO^ 

[0030] ^7^f7yh - ayfa-^ - 

^x^l 0 2 H £ m^O^^iti 6 /c ^ ^15: 
(t?>ixfc#*P«*««"Cfe5o = ^ 3 0 2 

tt, ft3®W(CS^««*ixfc^y^r— "^2 1 6^(Dirdf 

• ^^A^tv^i2 1 4(c«-*p*tt5o mm 
3 0 2ii, ^■-^ffim^-EHiieg (fifin-e^-f) 

S:^ UT, CPU104, BSE 
Bt^iJ^V^^--^ 2 18, Ml/^^ 2 2 0, R 
30 I^JEiEplgUv^^ 2 2 2&^&±*~T ■ f^J**— 

ITLfc/^ll tiM^e^^ 3 0 2 i±Mm$M'( > 
^^r-^ 2 1 8 Oft F A L S E lit y h L , TOD^ 

[0031] m^(^±^e-^ 3 0 2icov^-cii^<o^ 

<, 9MGk±*=- ? 3 0 2j5STOD^ u y$ 1 0 8 Of 

r • tr>^|g«2 1 4^©tsft»S:, 

mm{%±^~? 3 0 2ttffl/rO#figS*S:l£tS-r5 
50 OT(4*<^o»«A*^^Sril:t6K«i-tttfJ:v^ ft 
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3 0 2 rt-C«»«±Sfi«ffi«:tT 5 -<< WR 
[0 0 3 2] HI 4(1, &mWtc£ ^7-f7yh-^y 

• ✓«) l 2 0ft *aWJc^flfefS 

0(1, t-/^CPU 12 2, tw<TOD^n 
6 , I /OtK- M 2 8 . 45tM«2SlVI|cffl«coia««« 
13 0. 3fetJ««cHE/SSfi«ffio|B«««4 02^ 
tfo f-^CPUl 2 2a#W\ fff^b/AStt^n-fcs, 
tl24, SS«BEtB>^ci-fes/l^4 0 4. ^tfJEIE^n 
ir^^4 0 6^^tf (fc*>*>A,, ItCPUW^< 
(Oatgc0fc*!>(O«/*^^t>^tf) o TOD^n^i2 

jtW^-t?^ FSti-Cv^tf J:t\ I/OtK— hi 2 8 
(1, H^-iUf^y h!7 — 1 3tra:«»<0^ 7^ 

— ^ £ i: fcK3Bi!>3&*oSrUl^ 

ttSWc 1 3 0atr^JEjE/^Sfi«ffilB««*4 0 2 fit, 
RAM, x^f^, ^-^O^^^^^fSlS^ 

[0 0 3 3] S#-gft*~ KO»^*5V^rtt, I / 
b*vS Q LC*L7)*F AL S E"C£>*Ltf, ^ 7^7 V h 

6) , ^T^tSa^pf^/^^pir^iM 2 4(cJ: 
sniHHfc;£;ix. * LXm^itZtitcy*—***, I/OjK 
-M 28 ^r^r bT^^^rtTo-CV^^^ v-T r> h-Hc 

[0 0 3 4] fcu S«S^xfcBBEfl#*iK 
TRUEttoll ^7>f7yh£OTOD^0^^?)iir 

Ote, §ffUc^7^7yNTOD^a^^C 
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Sfctf>«£, HjE»aS^n-fes/^4 0 6(i, TOD^ny 

* 1 2 6(os!&0>fii£g<f £*i,fc^-f r>- MOD^ 

py^ffifcSrJWRU ^tiiaot^7^7y hcoMiE 

tr< r <h^J: t9ffbi ^3E jEWSEffi SrStSf 6 J: 5 **«t 
70 fcl*5VvCfi, TOD^ n 1 2 6(OaH9Efli[tS«*tu 

^7^7>hTOD^py^ as$f L v ^3E jEBHSfiSrft^ 
T*ffJ5o -coffin ^::o^7-f7y hj&»£>*>l?=*-a 

r • ^4 ^>k^^m istztz \cmmx^z> £ ? 

OBilQttStt4 0 2^1E«*ttS 0 
[0 0 3 5] rrLV^»a»jRffl[S:*fe-r5fc«>JC, ^7 

ypiryt4 04[Ci^ ^ TV hTOD^ o y ^ 

50 ^*S4 0 2tc!S«£*b£o JEEWSEffiO t # t PlfiHc, 

[0 0 3 6] »a»««^t)5jEjEWI»«aottaiS:«: 
^^0+7>^III^, i^— ^«ffiia«ffl*4 0 2rt(C 

^u^<T^J:v\ xtt-ttttis?^, ^^-rr^htc^t 

LtW^ra7 • ? <J J*W$iV>tpXi&ni>X\<^z<DX 

[003 7] JiflS<oWLV^««»jtt4^tJ«KEWSE«[S: 
3S^O«, ^TOD^n y<7 1 2 60ltffiffl<b th 

\cJXU<om-. Ht^fc;/»R^p-fey^ 1 2 4{cJ: 
50 ^LtMtrt^^7^7y K^eiH^nSo 
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[0 0 3 8] 17— s< - ^yta-^ • i/Xy'M. 1 2 0 ^ 

b Lt, »S»jKflI&V3EIW»fi[(^fflai4:KSa/lE 
ffl[S:3S*L"Cie^kLTOD^p y^ffii: fc tlc^n — 

^--v^ h . ^— K^^-sft^— KontHdSSSJfAt- 

<om$lMm\citt* =lT • *>f<M£Bo3ESrSrf?5 J: 5 
v\, 

[0 0 3 9] Si^tU, ^OlteiLt^T 
[0 0 4 0] (1) *3lW*c3c^»«*tLfc^y^-^ 

n y ^ £ B^u^y— irSr^t? SB* (time 
-of-day:TOD) ^ny^ tttfSt^aT • 

(2) HtjfSTOD^ o y^dSMlB*jte»»*!!!3ffiaS«il^ 

i:*3fflW^«±*« * ft*'* ^ ^i*a krb s n -5 _L . 

12 (1) ldl5tt<Oir ^r^T • 94 J±5— fcTv^SSBo 

(3) ift!B4*BH«a s , futa^^t 0 ^ — ^ - ^fA£0'> 
^t 1 ^ • i^y T/u#*{c»/Si-SJbE (1) KfEiffiGOir 
df^T • A*— fcTi^gBo 

(4) tiiiB^^ii^H(iis3>t o aL-^ • ^^^ich^t 

^«3&^T^-fer^RrilB"C*)5JiE (l) fclStt<D-fe*3. 

(5) 8(rtE*ffitt^Btfia= yt^- * • v-^^jU(c@W 

r • 94 j^^—^>^mm 0 
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5±E (1) *cia«o-fe^roLr • ^>r^^r— tr>-^3S 
B 0 

(7) JifJlSir^T • ^^AI^I^J; *)H*feStLfc 
K^jflStftlBTOD^Dy^oaSEfflSr-S'tpifB (6) 

(8) B#S!JXt^BW©V^tbd^MjEffl^$ftL36*oK 
MlEia^fiflSTOD^ n y^tcSiffli-S^^^rv h • 
^Py^JEE^SSr^prsJilE (l) MlSiK^ir^T 

(9) fflSajEjEffl[3&s*ffi«S:fflV^-CBt^l2Sn5-blH 
(8) MlEiftW-tr^raT • 94J*3— \fZs#m.U* 

(10) W31W(^^»«Sn^;/^-v?rt^K«$ 

0Wl/yy-<b^tf0B^ (time-of-day : TOD) 
^^t, HtflETOD^ p y^^IE$ttfcl$jEO&t^ 

#h Bit, &0«fllff«jttB#MiZ)V^-ftLd^fflS:S«-r6 

&$-x.Z>m£}b$:fti-Z> J £*~T • 94 
B„ 

(1 l) 1tiffi»&Wmui?x9i>mM<om&»Ml*. iff 

30 zm^xmrnnmnm^v b ufc^^ m 

JEESLTTRU Eld-fey h£;Jx6_bie (10) (cfS^cr) 
(1*2) S9|EBIEI**!l-f ^v?^— v-^^^co^ 

(-P-V^) fa^fe^LTV^-^^U^^^tC^LX F A 
^0 LSElC-fey h*tt5±1B (11) (Cia^CDir^r^T • 

(13) SWSixfcRWak 0f+. xtf»«»«o«»cs 

FALSElCtyhU SftSn/tB#»J, Bf+. 

&^<omm^i^tix^r>it^ia^^m^^ 

hStLfcffidSffiflSTOD^ n ^ (cir y hSti 
50 ^SrTRUElC-fery h-t"SH#J[y3SfiKS^«S:*-i-S± 
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E (10) lcES£<Oir*^T * ^^A^-fy^gf 0 
(14) ME-fe^a-r ■ ^-f A^f~f ^^Klli&s, to 
D ^ n y ^ ^IjEHIISrSfft^* ^MRBBSr^i-ffiS: 

tK fflrEa«*tLfc3ESH«offiJca^^THfrE3ejEW 
SEU^^*"fey h-r-5*il!Sr*-r-S±E (1 3) KE 

(l 5) S&fNcJ; 9ittrETOD^ d y^JUWtfEJEjEW 

"t-53EjEWlBES:tf 5 TOD^ n y $ SHES**-*-* JhE 
(14) lCE«<£>i?*^T • #4 J**— tf>^3SJS. 

(16) MjEjEIE^U^^od^v if#, 25: 

WETOD^oy^jcaafflstL-sjejEwaEifisi 

l±, flftETOD^ n s/^tcafflStbSJEiEWaE^lo^ 
JiE (1 5) iCEiSCO-fe^^T ■ ^-TA^-fcfV^g 

go 

(17) jE(03EjE»i«Effl^lt»«r^U, A<z>3EjEW»ffi 

E (16) KE*<0*^A • *-tfv^3£it 0 

(18) miET OD^ny^ mE»EH##M vs?^— 
fi. SffEttftKritt^v?^^, &0«fltrE!ejEBl3»u^^ 

fi-*"S±E (1 6) fcE*Wir=*;xT • *>r<fc=¥— fcTv 

(19) ffiEJEjEWSEU'^^Offl^BtrETOD^o sy 
?%W&\c±y h UT^e>BtTODrttc:«J|LS4xfc KV 
7 hfi<DBfl»-C*>9. 8ffE»«»j»^^^^ffl3asKK 
y 7 hft^TOD^ n y^OifeOttS^*fJ6"r5^ 

ay^^tbfc Ky ^ h*^<z>jtiRtcs<5< jiE (is) *c 

(20) aaEP#*j, b«\ Rxm&ftmnmw'rtiib* 

*TU »tuEir*^T • *>f Agnate J; 

v?^^comffifi, trEMElHS^^^^oSffiffl. RXfi 
Kffl$M4 >i?<Zr— *<©5lffiffi©^rfta>&^tr±E 
(13) t£E»Wi?*^T • A*— fV^jlo 
(2 1) P#»J^o y^i: BW*u^^— Sr^tf^— 
H$ (t i me-of -day : TOD) ^Py^SrftSa^^a 

fc) ■ #4 J* • ^-Cfco-C, ^ffM^-atHr^T 
• AA£, ffirE^BBttt£*ff&1-* 

^•i^affijS'Ji-s^o-fey^^t. BtrE*/fl«*rffl^ ■ 
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(2 2). flftEl^— ^TOD^n y^coffi, ^7-fTVh 

3EjEHBlcov^ixd>|cS<5v^rBt^7^ TV h • ^ n y 
^3EjE«*rtmcf*3EE»l**a*#'r5JbE (2 1) 

(23) StfE-^— ^TOD^n y ^<offl, ^7-fTVh 

^#a^*-r6±E (2 1) tcE*Wir*^T - ^ 

(2 4) miE^^Tv h • ^oy^jEIEffl^ 
(c. ffjE^^Tvh • ^□^£OM««K^ 

£;Jx5_hE (2 2) ldE*t<0-fc: =*r^T • 9 4 J* • U— 

(25) huejeie^^ iuE^/ai^^T^^b^n 

SJbE (2 2) t£E«Oi?*^T • ^-f A • HJ— 

(2 6) f$m?*y? kBtt#Ts>'#'—&'$t*1)---'<n 
H# (ti me-of -day : TOD) ^ n y $ =i V t'a 

^c) • #4 ^ • t-/<"C*oX, -fe^f^T • 

Si:, SaE*^«*-ffi^^T89ETOD^Dy^36»e>(Z>fl* 

EBt^kSnfcBtffl&VBW^flfft^^a— K^ir^. h 

(2 7) suEi^" — ^TOD # v y # <0$L* Z^-iT^Y 

BffUJco^^^rv h • ^ p ^ ^ JEjEf+3*j&^«*dtbfc 

^3ejE«*l+*"*-S3EiE»l«£^aS:^r"*-5±E (2 6) 
iCEtc^ir^roLT ' & ^( J* • 
(28) SfTE^^TOD^ n y ? <D\^ 2 S 74T^Y 

S ttfc^««ffi©^"f tidMdS<3 v MTg^ 7 T v h 
«#aSr*i-S±E (2 6) (cE^^ir^r^T • 94 J* 
(2 9) luE^^^TVh • ^Py^IEfi^, 

$H5±E (2 7) tCEtt^^^^-T • $41* ' *tJ~ — 
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